I bridge the gap between 2nd Line of Defence frameworks and data engineering. I do not just write risk registers; I build the automated pipelines to enforce them.
Core Stack: Python, SQL, dbt, PostgreSQL, Power BI
Frameworks: DORA, EU AI Act, GDPR, ISO 27001, NIST AI RMF
- DORA Register of Information Pipeline: Automated data quality controls for EU regulatory reporting.
- Model Risk & EU AI Act Register: Lifecycle compliance pipeline enforcing AI validation gates.
- GRC Risk Frameworks: Board level Enterprise Risk Register and ISO 27001 Gap Analysis.
- Vendor Risk & Treatment: Risk financing analysis exposing "Flawed Transfers" in vendor SLAs.

